Uploaded image for project: 'Airavata'
  1. Airavata
  2. AIRAVATA-3096 PGA and Django Portal Users and user group related issues
  3. AIRAVATA-3226

BUG: In Manage Users interface for some users, edit button doesn 't reveal the user groups.

Details

    Description

      1. In Manage Users interface, for some users when clicked on Edit, can view the groups to select and add.
      2. For some users, the button does not reveal the groups, no it displays any error message.

      Attachments

        Activity

          eroma_a,

          The problem here is that the user exists in Keycloak but not in the Airavata User Profile Service. Once the user logs in a user profile will be created for the user.

          Would it help to display a message that the user doesn't have an Airavata User Profile yet but will have one once they log in?

          marcuschristie Marcus Christie added a comment - eroma_a , The problem here is that the user exists in Keycloak but not in the Airavata User Profile Service. Once the user logs in a user profile will be created for the user. Would it help to display a message that the user doesn't have an Airavata User Profile yet but will have one once they log in?
          eroma_a Eroma added a comment - - edited

          marcuschristie So they have verified their email but have not logged in at least ones?
          A message would be helpful.

          But when we enable the user from this interface, that means user has not verified email nor logged in. So then also we would not see the roles?

          Is there anything we could do without waiting for user to log in? Or is that the way it is?

          eroma_a Eroma added a comment - - edited marcuschristie So they have verified their email but have not logged in at least ones? A message would be helpful. But when we enable the user from this interface, that means user has not verified email nor logged in. So then also we would not see the roles? Is there anything we could do without waiting for user to log in? Or is that the way it is?

          Part of this is also that we are using the same Keycloak as the old gf4 portal, but Airavata db is older so any recently created user accounts will be in Keycloak but not in the Airavata User Profile server.

          Actually, I did change enableUser so that the user profile is already there. So if a user has verified their email or they log in through CILogon, they should already have a user profile. So it occurs to me this bug could be unique to this situation that we are using Keycloak but don't have some User Profile service records since we have an older copy of the database.

          marcuschristie Marcus Christie added a comment - Part of this is also that we are using the same Keycloak as the old gf4 portal, but Airavata db is older so any recently created user accounts will be in Keycloak but not in the Airavata User Profile server. Actually, I did change enableUser so that the user profile is already there. So if a user has verified their email or they log in through CILogon, they should already have a user profile. So it occurs to me this bug could be unique to this situation that we are using Keycloak but don't have some User Profile service records since we have an older copy of the database.

          Commit 4384aaf382f3cb82833fe5485594134db62ebb6e in airavata-django-portal's branch refs/heads/master from Marcus Christie
          [ https://gitbox.apache.org/repos/asf?p=airavata-django-portal.git;h=4384aaf ]

          AIRAVATA-3226 Allow "activating" user who is enabled in Keycloak but for some reason doesn't have an Airavata User Profile

          jira-bot ASF subversion and git services added a comment - Commit 4384aaf382f3cb82833fe5485594134db62ebb6e in airavata-django-portal's branch refs/heads/master from Marcus Christie [ https://gitbox.apache.org/repos/asf?p=airavata-django-portal.git;h=4384aaf ] AIRAVATA-3226 Allow "activating" user who is enabled in Keycloak but for some reason doesn't have an Airavata User Profile

          I've added an "Activate user" option for users that are in this situation. This allows an admin to just go ahead and activate the user, triggering the creating of a user profile and allowing the admin to then assign the user to groups.

          eroma_a, can you test this?

          marcuschristie Marcus Christie added a comment - I've added an "Activate user" option for users that are in this situation. This allows an admin to just go ahead and activate the user, triggering the creating of a user profile and allowing the admin to then assign the user to groups. eroma_a , can you test this?
          eroma_a Eroma added a comment - - edited

          marcuschristie Tested in https://django.staging.seagrid.org
          Found such user in testing and saw the message "User staginguser1 has verified their login, but doesn't yet have an Airavata User Profile. Click Activate to create an Airavata User Profile for this user. This will allow the user to be assigned to groups." with Activate button. When clicked on 'Activate' I was prompted with 3 user groups. Added the user in to gateway user group. User refreshed the page and now has access to the gateway portal, https://django.staging.seagrid.org

          When user has created the account and not verified the email I see email verification plus groups to add the user.

          eroma_a Eroma added a comment - - edited marcuschristie Tested in https://django.staging.seagrid.org Found such user in testing and saw the message "User staginguser1 has verified their login, but doesn't yet have an Airavata User Profile. Click Activate to create an Airavata User Profile for this user. This will allow the user to be assigned to groups." with Activate button. When clicked on 'Activate' I was prompted with 3 user groups. Added the user in to gateway user group. User refreshed the page and now has access to the gateway portal, https://django.staging.seagrid.org When user has created the account and not verified the email I see email verification plus groups to add the user.
          eroma_a Eroma added a comment -

          Tested in https://django.staging.seagrid.org
          Comment added

          eroma_a Eroma added a comment - Tested in https://django.staging.seagrid.org Comment added

          People

            marcuschristie Marcus Christie
            eroma_a Eroma
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: